Skip to content

Instantly share code, notes, and snippets.

View bfrancom's full-sized avatar
💥
Power wheels, power wheels, pow-pow-power wheels!

Ben Francom bfrancom

💥
Power wheels, power wheels, pow-pow-power wheels!
View GitHub Profile
@bfrancom
bfrancom / get_gha_secrets.yml
Created September 5, 2025 16:52
Retrieve GitHub Action Secrets Securely
#From this website: https://meirg.co.il/2022/07/01/how-to-recover-secrets-from-github-actions/
name: Recovering secrets
# Assumption:
# You've created the following GitHub secrets in your repository:
# MY_CLIENT_SECRET - encrypt/decrypt with openssl - useful for public and public repositories
# MY_OPENSSL_PASSWORD - used to protect secrets
# MY_OPENSSL_ITER - Use a number of iterations on the password to derive the encryption key.
# High values increase the time required to brute-force the resulting file.
# This option enables the use of PBKDF2 algorithm to derive the key.